Senior Software Engineer, Security
VTS · New York, New York, United States
About this role
**Senior Software Engineer, Security** We are seeking an experienced **Senior Engineer** to help strengthen and reinforce our security processes, workflows, and posture as it relates to our applications, cloud infrastructure, and platform. In this role, you will define how we find and close exposures before they’re used against us—owning and engineering the detection, investigation, and response capabilities that protect our global platforms. **Location & Schedule:** This opportunity is located in **New York, NY** and requires this hire to work from our office **four days a week**. --- ## What Makes This Job Awesome? You will… - **Security Architecture & Tooling:** Own our **SAST/DAST** program end-to-end—selecting, tuning, and integrating static and dynamic analysis tooling into the **CI/CD pipeline** so vulnerabilities are caught before merge. - **AI & Agentic Defense:** Proactively identify and build **AI/LLM-driven agents** that close the gap between exposure and detection. Layer LLM inference across **dependency/supply-chain analysis, code-level review, and runtime behavior**. - **Deep Investigation:** Own security incidents end-to-end—from first anomalous signal through root-cause analysis, remediation, and post-mortems that prevent recurrence. - **Read by Code:** Read code fluently enough to validate findings at the source. Comfortable working with at least one systems language (e.g., **C, C++, Rust,** or similar). - **Vulnerability & Threat Management:** Lead vulnerability management and threat modeling across internal and external environments, prioritizing by **real-world exploitability and business impact** (not just CVSS). - **Compliance & Trust:** Partner with legal, IT, and leadership to mature compliance posture (**SOC 2 Type II, ISO 27001**, InfoSec, and customer security questionnaires) and translate audit requirements into practical engineering. - **Mentorship & Influence:** Mentor engineers and influence cross-functional product teams on secure coding, threat modeling, and security-first development. - **Incident Response:** Serve as a high-level escalation point for complex incidents and drive structural improvements through deep-dive post-mortems. --- ## What You’ll Do - **A Student of the Craft:** Stay current with how AI is reshaping the security landscape; research-driven and willing to rebuild approaches when assumptions no longer hold. - **Secure by Design:** Hands-on experience with **secrets management** (Vault, AWS KMS/Secrets Manager, or similar), **secure API design** (authN/authZ, input validation, rate limiting), and hardening standards like **CIS Benchmarks** and **SELinux/AppArmor**. - **The “AI Native” Defender Mindset:** Embed LLM inference at multiple layers (supply chain, code, runtime) for correlation and triage; distinguish genuine threats from hype. - **Proven Track Record:** **8+ years** in Security Engineering/AppSec/Vulnerability Research/Incident Response, including **2+ years** in a senior-level capacity driving cross-team initiatives. - **Foundational & Polyglot:** Ability to write in systems-level languages (e.g., **C, C++, Rust, Go, ASM**) and critically read other stack languages (Ruby, Node.js, Java, TypeScript, Python). - **Investigator’s Mindset:** Follow problems from exposure to root cause to full closure; respond in measured steps and avoid panic. - **Compliance Fluency:** Comfortable operating within **SOC 2, ISO 27001**, or similar frameworks. - **Autonomous Operator:** Ow
Listing freshness
CronJobs last confirmed this listing 2h ago. If its source stops confirming the opening for seven days, this page is removed from active inventory.